Apparatus, method, and computer program product for processing information

Abstract

An information processing apparatus performs mutual authentication with another information processing apparatus storing key management information and at least one of apparatus secret keys, the key management information containing encrypted secret keys each being a secret key encrypted with a different one of the apparatus secret keys respectively assigned to information processing apparatuses. The apparatus transmits, to the other apparatus, designation information specifying one of the encrypted secret keys decryptable with the apparatus secret key, out of the encrypted secret keys contained in the key management information usable by the apparatus, receives the encrypted secret key specified by the designation information out of the encrypted secret keys contained in the key management information stored in the other apparatus from the other apparatus, obtains the secret key by decrypting the encrypted secret key with the apparatus secret key, and performs authentication with the other apparatus based on the secret key.

1 . (canceled) 
     
     
         2 . A system comprising;
 a memory card comprising;
 a controller, 
 a first memory area configured to store first identification information and a first key, wherein the first memory area is not writable from outside, 
 a second memory area configured to store encrypted identification information, wherein the second memory area is readable from outside, and 
   a host device comprising a second key, wherein   the memory card generates a third key with the first key,   the memory card generates authenticate information by using one way calculation based on the third key and the first identification information,   the memory card sends authenticate information to the host device,   the host device reads the encrypted identification information stored in the second memory area,   the host device generates verification data by using the second key and the encrypted identification information, and   the host device verifies the authenticate information received from the memory device by using the verification data.   
     
     
         3 . A system comprising;
 a memory device comprising;
 a first memory area configured to store first identification information and a first key, wherein the first memory area is not writable from outside, 
 a second memory area configured to store encrypted identification information, wherein the second memory area is readable from outside, and 
   a host device comprising a second key, wherein   the encrypted identification information is read from the second memory area, is sent to the host device, and is used to generate verification data with the second key,   the first key is read from the first memory area, and is used to generate a third key,   the first identification information is read from the first memory area, and is used to generate authenticate information with the third key, and   the authenticate information is sent from the memory device to the host device, and the authenticate information is verified by using the verification data.   
     
     
         4 . A memory card authenticated by a host device, comprising;
 a controller,   a first memory area configured to store first identification information and a first key, wherein the first memory area is not writable from outside,   a second memory area configured to store encrypted identification information, wherein the second memory area is readable from outside, wherein   the memory card sends encrypted identification information to the host device,   the memory card receives host information form the host device,   the memory card generates a third key based on the host information and the first key,   the memory card generates authenticate information by using one way calculation based on the third key and the first identification information, and   the memory card sends authenticate information to the host device.   
     
     
         5 . A host device executes an authentication process with a memory device, wherein
 the memory device comprises a first key and first identification information stored in an inaccessible manner, encrypted identification information and index information stored in a readable manner, the memory device generating authentication information by using the first key and the first identification information; and   the host device is configured to:
 store a plurality of second keys; 
 read the encrypted identification information, and the index information from the memory device; 
 decrypt the encrypted identification information; 
 select one of the plurality of second keys corresponding to the index information; 
 generate verification data with the selected second key; and 
 verify the authenticate information received from the memory device by using the verification data. 
   
     
     
         6 . A memory device to be authenticated by a host device, comprising;
 a first memory area configured to store first identification information and a first key, wherein the first memory area is not writable from outside,   a second memory area configured to store encrypted identification information, wherein the second memory area is readable from outside, wherein   the encrypted identification information is read from the second memory area, is sent to the host device, and is used to generate verification data based on a second key stored the host device,   the first key is read from the first memory area, and is used to generate a third key,   the first identification information is read from the first memory area, and is used to generate authenticate information based on the third key, and   the authenticate information is sent from the memory device to the host device, and the authenticate information is verified by using the verification data.   
     
     
         7 . A memory device to be authenticated by a host device, comprising;
 an inaccessible memory area configured to store identification information and a first key,   a readable memory area configured to store encrypted identification information, wherein   the encrypted identification information is sent to the host device, and is used to generate verification data,   the first key and the identification information are used to generate authenticate information, and   the authenticate information is sent to the host device, and the authenticate information is verified by using the verification data.   
     
     
         8 . The memory device according to  claim 7 , wherein
 the host has a plurality of second keys and   the host device select one of the plurality of second keys corresponding to index information stored in the readable memory area;   
     
     
         9 . The memory device according to  claim 7 , wherein
 the encrypted identification information is decrypted by the host device and is used as part of the authentication process by the host device;   
     
     
         10 . The memory device according to  claim 7 , wherein
 the authenticate information generated by using one way calculation based on the identification information and a third key which is generated by using the first key.   
     
     
         11 . The memory device according to  claim 7 , wherein
 the verification information is generated by using one way calculation based on the second key.   
     
     
         12 . An information processing device comprising;
 a receiver that receives a first key management information and identification information from an external device,   a generator that generates first information based on the first key management information and the identification information,   a sender that sends the first key management information to the external device, wherein   the first information is processable information by the external device.